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DETAILED ACTION 



1. 



Claims 1-26 have been cancelled in a preliminary amendment. 



2. 



Claims 27-52 have been added. 



3. 



Claims 27-52 have been examined. 



Claim Rejections - 35 USC §112 



The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

1. Claim 40 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

2. Claim 40 recites the limitation "the printing or copying system verifying 
authenticity..." in line 3 of claim 40. There is insufficient antecedent basis for this 
limitation in the claim. 



(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 



Claims 27-52 are rejected under 35 U.S.C. 102(e) as being anticipated by United 
States Patent Application Publication No. US 2002/0042884 to Wu et al., hereinafter 
Wu. 

3. Regarding claim 27, Wu teaches a method for authenticating a data processing 



Claim Rejections - 35 USC § 102 



system, comprising the steps of: 
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generating first information by a first data processing system and delivering the first 
information to a second data processing system of a control unit (page 1 , paragraphs 
14, 19 and 21, page 2, paragraphs 26 and 36 and page 5, paragraph 116); 
transmitting first data from the second data processing system to the first data 
processing system over a data line, the first data being generated by the second data 
processing system with aid of the first information and additional information contained 
in the second data processing system (page 1 , paragraph 23, page 2, paragraphs 26, 
41 , 42, 44 and 46, page 3, paragraphs 54, 56 and 58, page 4, paragraph 89, page 6, 
paragraph 141, page 8, paragraphs 196-199, page 11, paragraphs 281-285, page 16, 
paragraphs 462-466 and page 17, paragraph 472); 

generating second data by the first data processing system depending on the first data 
and transmitting the second data from the first data processing system to the second 
data processing system over the data line (page 1, paragraphs 19-24, page 2, 
paragraphs 26-34, 39, 44 and 47, page 3, paragraphs 54 and 56, page 5, paragraph 
116, page 6, paragraph 147, page 8, paragraph 189, page 10, paragraph 247, page 11, 
paragraph 291, page 15, paragraphs 410-413 and page 16, paragraphs 461-466); 
generating authentication information for authenticating the second data processing 
system by the second data processing system with aid of the second data (page 2, 
paragraphs 37 and 39, page 4, paragraphs 104-106, page 5, paragraphs 112 and 117, 
page 10, paragraphs 257, 258, 264, 265, 269 and 270, page 12, paragraphs 312, 313, 
317 and 318 and page 13, paragraphs 340-345 and 360-365). 
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4. Regarding claim 28, Wu teaches wherein the additional information contains a 
hardware identifier of the second data processing system (page 3, paragraph 52, page 
9, paragraph 218, "the ID of their hardware device", page 13, paragraph 340, "a 
hardware device for that receiver, which has a unique ID key" and page 15, paragraph 
402). 

5. Regarding claim 29, Wu teaches wherein a check is performed with aid of the 
second data in order to determine whether the second data processing system contains 
the hardware identifier (page 3, paragraph 52, page 9, paragraph 218, "the ID of their 
hardware device", page 13, paragraph 340, "a hardware device for that receiver, which 
has a unique ID key" and page 15, paragraph 402). 

6. Regarding claim 30, Wu teaches wherein the second data contain an expiration 
date and information based on which access rights of the second data processing 
system are defined (page 2, paragraphs 26-34, "an expiry date", page 3, paragraphs 
55-57, page 10, paragraphs 242, 243, 261 and 266, page 11, paragraphs 273, 283, 284 
and 288, page 12, paragraphs 307, 309, 314 and 321, page 13, paragraphs 362 and 
363, page 1 4, paragraphs 381 , 386 and 393, page 1 5, paragraphs 41 1 , 41 2, 41 6, 434 
and 436, page 16, paragraphs 441, 448, 464 and 465 and page 17, paragraphs 469, 
481,487 and 494). 

7. Regarding claim 31 , Wu teaches wherein the access rights are assigned with aid 
of an authorization level (page 2, paragraph 35, "sender may be the one who authorizes 
the document" and 47, page 3, paragraphs 54, 57 and 58, page 4, paragraphs 89-91 
and 95, page 6, paragraph 155, "checks the database record of sender's definition to 
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see if they are allowed to print the document, and how many copies they are allowed to 
print", page 7, paragraphs 167 and 171, page 17, paragraph 472 and page 18, 
paragraphs 504 and 505). 

8. Regarding claim 32, Wu teaches wherein the second data are transmitted in 
encrypted form (page 2, paragraphs 38, 41 and 46, page 3, paragraphs 54 and 56, 
page 4, paragraphs 92, 99 and 1 06, page 5, paragraphs 1 1 2, 1 1 6, 1 1 7, 1 22, 1 29 and 
130, page 6, paragraphs 137, 142, 147, 148, 151-153, page 7, paragraphs 171-173, 
page 8, paragraph 189, "delivered to the client in an encrypted format" and paragraph 
200, page 9, paragraphs 209, 211 and 215, page 10, paragraph 242-244, 246, 247, 
253, 261, 262, page 1 1 , paragraph 283-285, 287, 289, 291 and 297, page 12, 
paragraphs 309, 310 and 329, page 13, paragraphs 336, 337 and 362-364, page 14, 
paragraph 381 and page 15, paragraphs 411-413). 

9. Regarding claim 33, Wu teaches wherein the data line comprises a network 
connection (page 1, paragraphs 13-24, page 3, paragraph 58 and page 15, paragraph 
504). 

10. Regarding claim 34, Wu teaches wherein the data line comprises a point-to-point 
connection (page 2, paragraph 37, page 5, paragraphs 128-136, page 6, paragraph 
137, page 8, paragraph 189, page 10, paragraphs 240 and 250, page 11, paragraphs 
281 and 294, page 15, paragraph 422, page 16, paragraph 462 and page 17, paragraph 
475). 

1 1 . Regarding claim 35, Wu teaches wherein the second data contain a key (page 2, 
paragraphs 38 and 40, page 3, paragraphs 53, 54, 56, 58 and 61 , page 4, paragraphs 
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92, 105 and 106, page 5, paragraphs 113 and 123, page 6, paragraphs 147, 148, 151 
and 152, page 7, paragraph 172, page 9, paragraphs 208, 210, 215, 225 and 228-235, 
page 10, paragraphs 244, 247, 253, 255 and 261, page 11, paragraphs 283-285, page 
12, paragraphs 309 and 328, page 13, paragraphs 348-358 and page 14, paragraphs 
372-375 and 382). 

12. Regarding claim 36, Wu teaches wherein authenticity of the second data 
processing system is verified by a third data processing system contained in an 
electrophotographic printing or copying system (page 6, paragraphs 157-165, 
"photocopies the confirmation page", page 8, paragraphs 196-198 and page 18, 
paragraphs 506-510). 

13. Regarding claim 37, Wu teaches wherein the first information contains a 
transaction number (page 3, paragraph 61, page 5, paragraphs 121, 131-135, page 6, 
paragraphs 138, 139, 143-146 and 149-153, page 8, paragraph 205, page 9, paragraph 
210, "a valid user can only access their block by providing the correct password", page 
10, paragraphs 240, 264 and 269, page 11, paragraph 281, page 12, paragraphs 312, 
313, 317, 318 and 328, page 13, paragraphs 342, 343 and 360-362, page 14, 
paragraphs 384, 385, 389 and 390, page 15, paragraph 409, page 16, paragraphs 439, 
440, 444, 445 and 462-464 and page 17, paragraphs 475, 476, 485, 486, 490 and 491). 

[According to the Applicant's Specification, the "transaction number is a series of 
numbers and/or letters that a human operator must enter at the service and 
maintenance computer in order to execute the approval procedure. The 
transaction number generated by the authorization server 16 is sent to the 
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operator by mail or e-mail." The Examiner broadly interprets the claimed 
"transaction number" to pertain to the "password" disclosed by Wu.] 

14. Regarding claim 38, Wu teaches wherein the first information is sent per e-mail 
or mail (page 2, paragraph 38, page 5, paragraph 112 and page 6, paragraph 149). 

15. Regarding claim 39, Wu teaches wherein the first information that is sent to the 
first data processing system is entered by way of an input unit of the first data 
processing system (page 1 , paragraph 23, page 2, paragraphs 26, 41, 42, 44 and 46, 
page 3, paragraphs 54, 56 and 58, page 4, paragraph 89, page 6, paragraph 141, page 
8, paragraphs 196-199, page 11, paragraphs 281-285, page 16, paragraphs 462-466 
and page 17, paragraph 472). 

16. Regarding claim 40, Wu teaches wherein the second data processing system 
comprises a control unit, a third data processing system of the printing or copying 
system verifying authenticity of the second data processing system (page 2, paragraphs 
37 and 39, page 4, paragraphs 1 04-1 06, page 5, paragraphs 1 1 2 and 1 1 7, page 1 0, 
paragraphs 257, 258, 264, 265, 269 and 270, page 12, paragraphs 312, 313, 317 and 
318 and page 13, paragraphs 340-345 and 360-365). 

17. Regarding claim 41 , Wu teaches wherein hardware information of the second 
data processing system that cannot be modified by the user is used as a hardware 
identifier of the second data processing system (page 3, paragraph 52, page 9, 
paragraph 218, "the ID of their hardware device", page 13, paragraph 340, "a hardware 
device for that receiver, which has a unique ID key" and page 15, paragraph 402). 
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18. Regarding claim 42, Wu teaches wherein the second data are processed with aid 
of an authentication procedure which generates third information, the third information 
containing an expiration date and access rights of the second data processing system 
(page 2, paragraphs 26-34, "an expiry date", page 3, paragraphs 55-57, page 10, 
paragraphs 242, 243, 261 and 266, "the document has expired and viewing is not 
allowed", page 1 1 , paragraphs 273, "the document has expired and no printing is 
allowed", 283, 284 and 288, page 12, paragraphs 307, 309, 314 and 321, page 13, 
paragraphs 362 and 363, page 14, paragraphs 381, 386 and 393, page 15, paragraphs 
41 1 , 41 2, 41 6, 434 and 436, page 16, paragraphs 441 , 448, 464 and 465 and page 1 7, 
paragraphs 469, 481 , 487 and 494). 

19. Regarding claim 43, Wu teaches wherein the authentication procedure generates 
the same third data in the processing of several second data of different second data 
processing systems (page 2, paragraphs 37 and 39, page 3, paragraphs 58-61, page 4, 
paragraphs 104-106, page 5, paragraphs 112 and 117, page 10, paragraphs 257, 258, 
264, 265, 269 and 270, page 12, paragraphs 312, 313, 317 and 318 and page 13, 
paragraphs 340-345 and 360-365). 

20. Regarding claim 44, Wu teaches wherein verification of authenticity of the 
second data processing system is performed with aid of a challenge/response 
procedure (page 3, paragraph 61 , "accessed only when a password of the user is 
entered and verified", page 5, paragraphs 121, 130-135 and page 6, paragraphs 137- 
141 and 143-153, page 8, paragraph 205, page 9, paragraph 210, "a valid user can only 
access their block by providing the correct password", page 10, paragraphs 240, 264 
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and 269, page 1 1 , paragraph 281 , page 1 2, paragraphs 31 2, 31 3, 31 7, 31 8 and 328, 
page 13, paragraphs 342, 343 and 360-362, page 14, paragraphs 384, 385, 389 and 
390, page 15, paragraph 409, page 16, paragraphs 439, 440, 444, 445 and 462-464 
and page 17, paragraphs 475, 476, 485, 486, 490 and 491). 

21 . Regarding claim 45, Wu teaches wherein the second data contain a signed 
certificate (page 4, paragraphs 103-106, page 5, paragraphs 107, 108, 112, 113, 116, 
122 and 123, page 7, paragraph 172, page 9, paragraph 210, page 12, paragraph 328 
and page 16, paragraph 457). 

22. Regarding claim 46, Wu teaches wherein the second data contain a key, and the 
authentication information contains an authentication code generated with the aid of the 
key (page 2, paragraphs 38 and 40, page 3, paragraphs 53, 54, 56, 58 and 61 , page 4, 
paragraphs 92, 1 05 and 1 06, page 5, paragraphs 1 1 3 and 1 23, page 6, paragraphs 
147, 148, 151 and 152, page 7, paragraph 172, page 9, paragraphs 208, 210, 215, 225 
and 228-235, page 10, paragraphs 244, 247, 253, 255 and 261, page 11, paragraphs 
283-285, page 12, paragraphs 309 and 328, page 13, paragraphs 348-358 and page 
14, paragraphs 372-375 and 382). 

23. Regarding claim 47, Wu discloses an arrangement for generating authentication 
information, comprising: 

a first data processing system which generates first information, the first information 
being delivered to a second data processing system of a control unit (page 1 , 
paragraphs 14, 19 and 21, page 2, paragraphs 26 and 36 and page 5, paragraph 116); 
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transmitting first data from the second data processing system to the first data 
processing system over a data line, the first data being generated by the second data 
processing system with aid of the first information and additional information contained 
in the second data processing system (page 1 , paragraph 23, page 2, paragraphs 26, 
41 , 42, 44 and 46, page 3, paragraphs 54, 56 and 58, page 4, paragraph 89, page 6, 
paragraph 141, page 8, paragraphs 196-199, page 11, paragraphs 281-285, page 16, 
paragraphs 462-466 and page 17, paragraph 472); 

the second data processing system generating first data with aid of the first information 
and additional information contained in the second data processing system (page 1, 
paragraph 23, page 2, paragraphs 26, 41 , 42, 44 and 46, page 3, paragraphs 54, 56 
and 58, page 4, paragraph 89, page 6, paragraph 141, page 8, paragraphs 196-199, 
page 11, paragraphs 281-285, page 16, paragraphs 462-466 and page 17, paragraph 
472); 

a data line over which first data are transmittable from the first data processing system 
to the second data processing system (page 1 , paragraph 23, page 2, paragraphs 26, 
41 , 42, 44 and 46, page 3, paragraphs 54, 56 and 58, page 4, paragraph 89, page 6, 
paragraph 141, page 8, paragraphs 196-199, page 11, paragraphs 281-285, page 16, 
paragraphs 462-466 and page 17, paragraph 472); 

the second data processing system generating second data depending on the first data 
(page 1, paragraphs 19-24, page 2, paragraphs 26-34, 39, 44 and 47, page 3, 
paragraphs 54 and 56, page 5, paragraph 116, page 6, paragraph 147, page 8, 
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paragraph 189, page 10, paragraph 247, page 11, paragraph 291, page 15, paragraphs 
410-413 and page 16, paragraphs 461-466); 

the second data being transmittable from the second data processing system to the first 
data processing system over the data line (page 1, paragraphs 13-24, page 3, 
paragraph 58 and page 15, paragraph 504); 

the second data processing system, with aid of the second data, generating 

authentication information for authenticating the second data processing system (page 

2, paragraphs 37 and 39, page 4, paragraphs 104-106, page 5, paragraphs 112 and 

117, page 10, paragraphs 257, 258, 264, 265, 269 and 270, page 12, paragraphs 312, 

313, 317 and 318 and page 13, paragraphs 340-345 and 360-365). 

24. Regarding claim 48, Wu teaches a method for authenticating a control unit of an 

electrophotographic printing or copying system, comprising the steps of: 

storing first data in a first data processing system of the control unit (page 2, paragraph 

40, "a secure memory", page 3, paragraphs 52, 53, 60 and 61, page 7, paragraphs 171- 

173, page 8, paragraphs 189, 203, 205 and 206 and page 9, paragraphs 208, 210, 215, 

225); 

with aid of the first data, with the first data processing system generating authentication 
information which are transmitted to a second data processing system of the printing or 
copying system with aid of authentication data (page 2, paragraphs 38 and 40, page 3, 
paragraphs 53, 54, 56, 58 and 61, page 4, paragraphs 92, 105 and 106, page 5, 
paragraphs 113 and 123, page 6, paragraphs 147, 148, 151 and 152, page 7, 
paragraph 172, page 9, paragraphs 208, 210, 215, 225 and 228-235, page 10, 



Application/Control Number: 10/533,148 Page 12 

Art Unit: 2431 

paragraphs 244, 247, 253, 255 and 261, page 11, paragraphs 283-285, page 12, 
paragraphs 309 and 328, page 13, paragraphs 348-358 and page 14, paragraphs 372- 
375 and 382); 

verifying authenticity of the first data processing system by the second data processing 
system (page 2, paragraphs 38 and 40, page 3, paragraphs 53, 54, 56, 58 and 61 , page 
4, paragraphs 92, 105 and 106, page 5, paragraphs 113 and 123, page 6, paragraphs 
147, 148, 151 and 152, page 7, paragraph 172, page 9, paragraphs 208, 210, 215, 225 
and 228-235, page 10, paragraphs 244, 247, 253, 255 and 261, page 11, paragraphs 
283-285, page 12, paragraphs 309 and 328, page 13, paragraphs 348-358 and page 
14, paragraphs 372-375 and 382); 

defining method access rights of the first data processing system by the second data 
processing system with aid of the authentication data (page 2, paragraphs 32, "usage 
control" and 35, "sender may be the one who authorizes the document" and 47, page 3, 
paragraphs 54, 57 and 58, page 4, paragraphs 89-91 and 95, page 6, paragraph 155, 
"checks the database record of sender's definition to see if they are allowed to print the 
document, and how many copies they are allowed to print", page 7, paragraphs 167 and 
171, page 17, paragraph 472 and page 18, paragraphs 504 and 505). 
25. Regarding claim 49, Wu teaches wherein the first data contain a key or signature 
(page 2, paragraphs 38 and 40, page 3, paragraphs 53, 54, 56, 58 and 61 , page 4, 
paragraphs 92, 105 and 106, page 5, paragraphs 113 and 123, page 6, paragraphs 
147, 148, 151 and 152, page 7, paragraph 172, page 9, paragraphs 208, 210, 215, 225 
and 228-235, page 10, paragraphs 244, 247, 253, 255 and 261, page 11, paragraphs 
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283-285, page 12, paragraphs 309 and 328, page 13, paragraphs 348-358 and page 
14, paragraphs 372-375 and 382). 

26. Regarding claim 50, Wu teaches wherein the key comprises a public key or a 
private key (page 2, paragraphs 38 and 40, page 3, paragraphs 53, 54, 56, 58 and 61 , 
page 4, paragraphs 92, 1 05 and 1 06, page 5, paragraphs 1 1 3 and 1 23, page 6, 
paragraphs 147, 148, 151 and 152, page 7, paragraph 172, page 9, paragraphs 208, 
210, 215, 225 and 228-235, page 10, paragraphs 244, 247, 253, 255 and 261, page 11, 
paragraphs 283-285, page 12, paragraphs 309 and 328, page 13, paragraphs 348-358 
and page 14, paragraphs 372-375 and 382). 

27. Regarding claim 51 , Wu teaches wherein the data are transmitted between the 
first data processing system and the second data processing system with aid of a 
network connection, the first data processing system serving for remote control, remote 
servicing, or remote diagnostic analysis of the printing or copying system and has 
access at least to control units of the printing or copying system after the verification of 
authenticity (page 1, paragraphs 13-24, page 2, paragraphs 38 and 40, page 3, 
paragraphs 53, 54, 56, 58 and 61, page 4, paragraphs 92, 105 and 106, page 5, 
paragraphs 113 and 123, page 6, paragraphs 147, 148, 151 and 152, page 7, 
paragraph 172, page 9, paragraphs 208, 210, 215, 225 and 228-235, page 10, 
paragraphs 244, 247, 253, 255 and 261, page 11, paragraphs 283-285, page 12, 
paragraphs 309 and 328, page 13, paragraphs 348-358, page 14, paragraphs 372-375 
and 382 and page 15, paragraph 504). 
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28. Regarding claim 52, Wu teaches an arrangement for authenticating a control unit 
of an electrophotographic printing or copying system, comprising: 
a first data processing system of the control unit which contains first data (page 1 , 
paragraphs 14, 19 and 21, page 2, paragraphs 26 and 36 and page 5, paragraph 116); 
the first data processing system generating authentication information with aid of the 
first data (page 2, paragraphs 38 and 40, page 3, paragraphs 53, 54, 56, 58 and 61, 
page 4, paragraphs 92, 1 05 and 1 06, page 5, paragraphs 1 1 3 and 1 23, page 6, 
paragraphs 147, 148, 151 and 152, page 7, paragraph 172, page 9, paragraphs 208, 
210, 215, 225 and 228-235, page 10, paragraphs 244, 247, 253, 255 and 261, page 11, 
paragraphs 283-285, page 12, paragraphs 309 and 328, page 13, paragraphs 348-358 
and page 14, paragraphs 372-375 and 382); 

the first data processing system transmitting the authentication information to a second 
data processing system of the printing or copying system with aid of authentication data 
(page 2, paragraphs 38 and 40, page 3, paragraphs 53, 54, 56, 58 and 61 , page 4, 
paragraphs 92, 105 and 106, page 5, paragraphs 113 and 123, page 6, paragraphs 
147, 148, 151 and 152, page 7, paragraph 172, page 9, paragraphs 208, 210, 215, 225 
and 228-235, page 10, paragraphs 244, 247, 253, 255 and 261, page 11, paragraphs 
283-285, page 12, paragraphs 309 and 328, page 13, paragraphs 348-358 and page 
14, paragraphs 372-375 and 382); 

the second data processing system verifying the authenticity of the first data processing 
system with aid of the authentication data (page 2, paragraphs 38 and 40, page 3, 
paragraphs 53, 54, 56, 58 and 61, page 4, paragraphs 92, 105 and 106, page 5, 
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paragraphs 113 and 123, page 6, paragraphs 147, 148, 151 and 152, page 7, 
paragraph 172, page 9, paragraphs 208, 210, 215, 225 and 228-235, page 10, 
paragraphs 244, 247, 253, 255 and 261, page 11, paragraphs 283-285, page 12, 
paragraphs 309 and 328, page 13, paragraphs 348-358 and page 14, paragraphs 372- 
375 and 382); 

the second data processing system defining access rights of the first data processing 
system with aid of the authentication data (page 2, paragraphs 32, "usage control" and 
35, "sender may be the one who authorizes the document" and 47, page 3, paragraphs 
54, 57 and 58, page 4, paragraphs 89-91 and 95, page 6, paragraph 155, "checks the 
database record of sender's definition to see if they are allowed to print the document, 
and how many copies they are allowed to print", page 7, paragraphs 167 and 171, page 
17, paragraph 472 and page 18, paragraphs 504 and 505). 

Conclusion 

29. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

30. The following United States Patents are cited to further show the state of the art 
with respect to access control and the secure transmission of data, such as: 

United States Patent No. 7,421 ,41 1 to Kontio et al., which is cited to show digital 
rights management in a mobile communications environment. 
United States Patent No. 6,233,577 and 6,516,316 to Ramasubramani et al., 
which are cited to show a centralized certificate management system for two-way 
interactive communication devices in data networks. 
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United States Patent No. 7,290,288 to Gregg et al., which is cited to show a 
method and system for controlling access, by an authenticated server, to 
protected computer resources. 

United States Patent No. 6,424,954 to Leon, which is cited to show a postage 
metering system. 

31 . Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to JEREMIAH AVERY whose telephone number is 
(571)272-8627. The examiner can normally be reached on Monday thru Friday 8:30am- 
5pm. 

32. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571 ) 272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

33. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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